Skip to content

Commit

Permalink
Merge pull request #278 from co-cddo/shorter-user-sessions
Browse files Browse the repository at this point in the history
Reduce the session timeout
  • Loading branch information
maxf authored Sep 9, 2024
2 parents 56e6eee + 747e115 commit 111d808
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions request_a_govuk_domain/settings.py
Original file line number Diff line number Diff line change
Expand Up @@ -257,6 +257,9 @@
CSRF_FAILURE_VIEW = "request_a_govuk_domain.request.views.csrf_failure_view"
SESSION_COOKIE_SECURE = True

# Set session (end-user or admin) to expire in 24 hours
SESSION_COOKIE_AGE = 24 * 60 * 60

# Content Security Policy: only allow images, stylesheets and scripts from the
# same origin as the HTML
CSP_IMG_SRC = "'self'"
Expand Down

0 comments on commit 111d808

Please sign in to comment.